XScreensaver broken under Gnome? (SuSE 9.0)
Has anyone else noticed this? If I set a password on the screensaver (using a Gnome desktop, at least), everything seems normal, except that the screensaver is exiting after I put in my password to unlock the screensaver. I thought this was just a problem on my work machine, but then I tried it at home (where I normally don't have a password on my screensaver), and it does it too. Anyone know what's going on? Thanks, dk
You don't even have to give your correct password - you can type anything or nothing for a password - to exit the screensaver and get access to the computer. I tried "Lock screen" but that didn't work either. /Lars David Krider wrote:
Has anyone else noticed this? If I set a password on the screensaver (using a Gnome desktop, at least), everything seems normal, except that the screensaver is exiting after I put in my password to unlock the screensaver. I thought this was just a problem on my work machine, but then I tried it at home (where I normally don't have a password on my screensaver), and it does it too. Anyone know what's going on?
Thanks, dk
Has anyone else noticed this? If I set a password on the screensaver (using a Gnome desktop, at least), everything seems normal, except that the screensaver is exiting after I put in my password to unlock the screensaver. I thought this was just a problem on my work machine, but then I tried it at home (where I normally don't have a password on my screensaver), and it does it too. Anyone know what's going on?
By default, if you download xscreensaver and build it fro msource, it installs as suid root. This is a potential security problem, as if a vulnerability were to be found in it, a non-privileged user could possibly execute code as root. So, SuSE patch xscreensaver with code that replaces the password check (the bit that needs it to be suid) with code that calls an external password helper. Unfortunately, this code appears to not work properly, and it causes xscreensaver to seg fault. Whoops :) It's been a very long time since I did any serious C coding, but I'm hoping I'll be able to examine the patch and maybe figure what the problem is and fix it. All assuming I have time to do a debug build of xscreensaver and examine the backtrace... :) -- James Ogley, Webmaster, Rubber Turnip james@rubberturnip.org.uk http://www.rubberturnip.org.uk Jabber: riggwelter@myjabber.net Using Free Software since 1994, running GNU/Linux (SuSE 9.0). GNOME updates for SuSE: http://www.usr-local-bin.org
On Sat, 2003-11-08 at 06:54, James Ogley wrote:
All assuming I have time to do a debug build of xscreensaver and examine the backtrace... :)
Well, this is all out of my league. The question is: why should you have to fool with it? Shouldn't SuSE be taking this up and fixing it? I guess they're probably busy. I don't know how you feel about it, given your penchant for recompiling your own Gnome apps, but I'm hoping that Novell's acquistion will put the Ximian guys on short notice that a new version of XD should NOT suck on SuSE next time. If this were to work out, and we had (for lack of a better comparison) a situation as nice as XD1 on RH 7.3, would you continue your ULB project? Regards, dk
On Saturday 08 November 2003 7:51 am, David Krider wrote:
I don't know how you feel about it, given your penchant for recompiling your own Gnome apps, but I'm hoping that Novell's acquistion will put the Ximian guys on short notice that a new version of XD should NOT suck on SuSE next time. If this were to work out, and we had (for lack of a better comparison) a situation as nice as XD1 on RH 7.3, would you continue your ULB project?
Regards, dk
And all the diferent variations of Linux seem to mean someone somewhere WILL fixor it, in time for everyone to enjoy and use the product in a timely maner, that is one of the joys of so many variants of the OS.. as long as there IS choice there will be good software . OF course, from my point of view, the other basically witless OS NEVER ever came out w/ a useable stable sytem, never mind one that was less vulnerable to exploits of the haxorish kind... <sigh> I expect someone to maek a serious run at us soon, but hope , and belive that our kernal builders, and the otehr system watchers are keeping the openings for such exploits to a minimum. Til then, keep an eye on everything that is installed on any box undr your control. And keep permisions tightly controled.. I'm seriously interested in trying som ACLs for home use. keep teh kiddies from doing anything they oughtened, and perhaps a grownup or two as well. If they can't touch it they can't break it, nor invite anyone else in for a "looksee" .
I don't know how you feel about it, given your penchant for recompiling your own Gnome apps, but I'm hoping that Novell's acquistion will put the Ximian guys on short notice that a new version of XD should NOT suck on SuSE next time. If this were to work out, and we had (for lack of a
I believe I've commented that maybe XD on SUSE will suck less in future now :)
better comparison) a situation as nice as XD1 on RH 7.3, would you continue your ULB project?
Free Software's all about choice right? -- James Ogley, Webmaster, Rubber Turnip james@rubberturnip.org.uk http://www.rubberturnip.org.uk Jabber: riggwelter@myjabber.net Using Free Software since 1994, running GNU/Linux (SuSE 9.0). GNOME updates for SuSE: http://www.usr-local-bin.org
On Saturday 08 November 2003 12:51 pm, David Krider wrote:
On Sat, 2003-11-08 at 06:54, James Ogley wrote:
All assuming I have time to do a debug build of xscreensaver and examine the backtrace... :)
Well, this is all out of my league. The question is: why should you have to fool with it? Shouldn't SuSE be taking this up and fixing it? I guess they're probably busy.
Well there is a question. Is this a comunity where we all do what we can to improve things, or is it a product owned by a large corporation who ought to fix it for us. David
As an alternative in the meantime, read man xlock Or, if your PC is somewhere 'safe' ie at home, where only you can access it, just let the screensaver kick in without locking. -- James Ogley, Webmaster, Rubber Turnip james@rubberturnip.org.uk http://www.rubberturnip.org.uk Jabber: riggwelter@myjabber.net Using Free Software since 1994, running GNU/Linux (SuSE 9.0). GNOME updates for SuSE: http://www.usr-local-bin.org
participants (5)
-
David Krider -
david stevenson -
James Ogley -
jfweber＠bellsouth.net -
Lars Noren